回答 http://coma.0x3f.net/uncategorized/codegate2010-ctf-level-1/#more-87 手法 Shell via LFI - proc/self/environ method http://www.milw0rm.com/papers/361